Buffer Overflow Vulnerability in FalkorDB Redis Module
CVE-2026-88409

8.8HIGH

Key Information:

Vendor

FalkorDB

Status
FalkorDB Redis Module
Vendor
CVE Published:
21 September 2026

What is CVE-2026-88409?

FalkorDB versions 4.20.1 to 4.20.4 contain a buffer overflow vulnerability in the _Decode_GrB_Matrix function, located in /v19/decode_matrix.c. This flaw allows an attacker to craft specially designed input that can lead to a Denial of Service (DoS), potentially disrupting the functionality of systems relying on this module. Administrators are urged to take immediate action to mitigate this issue and ensure system integrity.

References

https://github.com/FalkorDB/FalkorDB/issues/2399

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.